CVEvulnerability
CVE-2014-3632
7.6 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-10-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file. NOTE: this vulnerability exists because of a CVE-2013-6433 regression.
Affected configurations
• openstack neutron (>= 2014.1 <= 2014.1.2)
Related
Weakness · not in database (1)
References
- http://rhn.redhat.com/errata/RHSA-2014-1339.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2014-1339.html Vendor Advisory